Preparing your environment
It is therefore necessary to make sure the notifications function properly.
Here are some guidelines:
- Notifications are sent from an IP address in the 194.50.38.0/24, default port 443 (HTTPS) range in Test and Production mode. This range of IP addresses must be authorized in the event of a restriction on the part of the merchant site.
- The merchant has to make sure that this URL is available via the payment gateway without redirection. Using redirection leads to losing data presented in POST.
This is the case if there is a configuration on your devices or on the side of your host that redirects the URLs of “https://www.example.com“ type to “https://example.com” or “http://example.com” to “https://example.com”.
- HTML must not be visible on the page. Access to images or CSS slows down the exchange between the payment gateway and the merchant website.
- Avoid integrating time-consuming tasks, such as PDF invoice generation or sending e-mails in your script.
The processing time has a direct influence on the time it takes to display the payment summary page.
The longer the processing of the notification, the greater the delay for displaying the ticket to the buyer.
The buyer may be tempted to close the browser and place another order.
After 10 seconds, the payment gateway consider that the call has failed (timeout).
- Make sure the IPN processing time is as short as possible (10s maximum). This will allow you to:
- provide a seamless user experience at checkout and increase the chances of payment conversion;
- ensure reliable synchronization of the transaction status in your IS, so that it matches the payment result.
- If your page is only accessible in https, test your URL on the website ofQualys SSL Labs(https://www.ssllabs.com/ssltest/ and change your configuration if necessary in order to obtain an A score.
Your SSL certificate must be signed by a certification authority known and recognized on the market.
Make sure that you use the latest version of the TLS protocol in order to maintain a high level of security.